4 ms·
I follow the development of signal quite a bit. Moxie comitted fixes about what he called "old sins" concerning group messaging. This was quite some time ago,
by bjoli 9y ago
I follow the development of signal quite a bit. Moxie comitted fixes about what he called "old sins" concerning group messaging.
This was quite some time ago, so they have been aware of that it was lacking somehow, possibly even before this was discovered.
- forkerenok 9y agoI'm not sure what's worse. If they knew it then risks should have been communicated to their user base.
- bjoli 9y agoI suspect it was more of a "this is old and crufty and isn't how we would do it today". Guessing the 128-bit number is non-trivial, and once someone has the ability to access the group id, all is already failed.